chinese_generic_botnet | 8688fbe0d85a42a96cc8a337e882ab267fe450e847351b6866e08ecd1bfe3110 | Triage

Submit
Reports

Overview

overview

Static

static

3

8688fbe0d8...10.exe

windows7-x64

8688fbe0d8...10.exe

windows10-2004-x64

Sharing

General

Target

8688fbe0d85a42a96cc8a337e882ab267fe450e847351b6866e08ecd1bfe3110
Size

4.1MB
Sample

231207-yrgyfsfc64
MD5

c862a8af9c31b5be4a50b17282630eaf
SHA1

d8653926e68fa30b3a7bfa382dc337f557d5c709
SHA256

8688fbe0d85a42a96cc8a337e882ab267fe450e847351b6866e08ecd1bfe3110
SHA512

70b4afb66f53c34ef364cbb2d109c33a993706a12603b3536e004081b6d4d0361f81a96e0a151e7f9fc970004e4c3c407f7e7475e4fc74a86fb2d71672debd9a
SSDEEP

49152:9QWqHcFt4tQGgKbDLKykKy5RyeEJzrlrx:9QWWcFt4t5gKbDLKykKy5QVJzJrx

Score

10^/10

chinese_generic_botnet botnet persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

8688fbe0d85a42a96cc8a337e882ab267fe450e847351b6866e08ecd1bfe3110.exe

Resource

win7-20231023-en

chinese_generic_botnet botnet persistence

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

8688fbe0d85a42a96cc8a337e882ab267fe450e847351b6866e08ecd1bfe3110.exe

Resource

win10v2004-20231130-en

chinese_generic_botnet botnet persistence

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  8688fbe0d85a42a96cc8a337e882ab267fe450e847351b6866e08ecd1bfe3110
- Size
  
  4.1MB
- MD5
  
  c862a8af9c31b5be4a50b17282630eaf
- SHA1
  
  d8653926e68fa30b3a7bfa382dc337f557d5c709
- SHA256
  
  8688fbe0d85a42a96cc8a337e882ab267fe450e847351b6866e08ecd1bfe3110
- SHA512
  
  70b4afb66f53c34ef364cbb2d109c33a993706a12603b3536e004081b6d4d0361f81a96e0a151e7f9fc970004e4c3c407f7e7475e4fc74a86fb2d71672debd9a
- SSDEEP
  
  49152:9QWqHcFt4tQGgKbDLKykKy5RyeEJzrlrx:9QWWcFt4t5gKbDLKykKy5QVJzJrx
Score

10^/10

chinese_generic_botnet botnet persistence
- Generic Chinese Botnet
  A botnet originating from China which is currently unnamed publicly.
  botnet chinese_generic_botnet
- Chinese Botnet payload
  botnet
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

chinese_generic_botnetbotnetpersistence

behavioral2

chinese_generic_botnetbotnetpersistence

© 2018-2025

Terms | Privacy